
Error: rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File: xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier: nyPX6GGkJHoXJbLcEzzeNiKsjhhwxpVvfY6KSGLbqTM=
Subject key identifier: A5:E9:36:2C:A1:44:CB:DF:FE:A7:1B:22:66:5E:6A:12:4F:BD:37:C8
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer: /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial: 02E0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number: 02DF
Signing time: Tue 13 Oct 2026 04:35:45 +0000
Manifest this update: Tue 13 Oct 2026 04:35:44 +0000
Manifest next update: Thu 15 Oct 2026 04:35:44 +0000
Files and hashes: 1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: O0hesenoPxKM1yvOOEbaQSLoJCXzqIphdIlEk2IEb7I=)
2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 04:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Validity
Not Before: Oct 13 04:35:44 2026 GMT
Not After : Oct 15 04:35:44 2026 GMT
Subject: CN=6acdb521-b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:18:46:8d:d1:b0:ba:d4:08:8f:c9:49:d8:
d1:8a:d9:d2:a5:10:53:b9:6c:3a:7c:55:44:c4:af:
e5:ee:5d:39:7c:ba:bc:35:ba:d1:ef:fb:81:46:77:
17:b4:58:ef:7f:98:ef:8e:d6:fa:f8:c9:d8:1e:cc:
3c:3d:54:a2:83:40:7a:12:f8:16:2e:3a:59:a1:ec:
ba:d2:d0:bc:0d:d0:77:1e:8c:46:e6:e2:50:4b:1a:
c7:a9:fe:e5:c9:ba:d0:f1:16:4b:14:b8:38:26:f2:
ed:cd:3f:12:0b:c7:cf:ee:b2:72:11:00:fe:17:16:
3b:1f:1d:e7:24:a1:3c:de:dc:b7:fb:dc:5f:a9:10:
0d:32:20:de:29:46:4f:26:36:b5:fc:83:60:fc:8e:
21:21:8f:05:af:ab:60:5b:cc:f5:1c:d2:35:fb:af:
52:9f:e6:81:12:ed:47:20:47:10:a7:39:58:35:e2:
d0:3d:e0:b1:4b:b9:58:df:3c:dc:90:23:f5:7e:27:
31:9a:57:4b:35:72:1f:30:d9:15:ce:e0:46:8a:65:
fa:fd:a3:79:0d:35:d3:6b:db:09:03:f8:97:01:8b:
de:4a:4a:20:31:d4:a9:0d:48:52:84:13:89:c8:a4:
3d:8a:90:78:d4:07:de:e5:02:af:9b:99:84:4c:6e:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:36:2C:A1:44:CB:DF:FE:A7:1B:22:66:5E:6A:12:4F:BD:37:C8
X509v3 Authority Key Identifier:
keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:77:49:9b:a5:b8:12:c8:4d:85:20:c2:de:e1:98:3d:16:
ed:2c:04:19:a6:de:b5:54:0c:bf:06:3b:13:b5:6e:5f:84:33:
0c:19:8e:f5:ea:c1:52:81:fe:2a:ca:86:6b:57:35:22:21:d4:
9f:14:8d:78:05:ef:98:c5:a9:95:fa:48:6d:b3:08:0e:6a:bb:
ff:dc:25:d8:d1:89:91:7e:69:c7:9a:0c:f5:e7:ef:08:14:42:
6e:71:5b:1c:08:df:1d:9b:d2:69:90:69:43:62:c5:1d:7a:d9:
f2:6a:c9:5f:f9:3e:02:44:f6:74:25:9f:fd:55:95:73:10:a9:
01:46:a8:ec:5d:4f:f1:76:23:e8:12:8c:6d:61:86:51:bf:c1:
9d:6c:e0:2f:df:ac:9e:8b:20:34:33:ce:c8:e4:5c:33:f2:02:
f4:e0:1c:b9:2b:32:35:7e:77:f1:87:81:15:40:cf:98:c0:84:
32:43:a6:b4:a0:a1:53:f9:e1:02:59:6c:0e:38:98:c3:49:7f:
ba:22:5c:80:31:07:71:5c:d2:f0:c9:85:99:42:8a:0f:18:e0:
f1:cb:fd:93:7e:83:29:6d:b7:ba:53:b9:c6:9c:b5:1c:67:37:
36:6b:e3:b9:56:c5:8c:26:68:8f:0d:ac:18:56:a5:91:ba:d5:
0f:80:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:44:32 2026 by rpki-client